Oracle Linux 10 : grafana-pcp (ELSA-2025-8915)

The remote Oracle Linux 10 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2025-8915 advisory. 5.2.2-3 - Resolves RHEL-89218: CVE-2025-22871 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note that...

Oracle Linux 10 : golang (ELSA-2025-8477)

The remote Oracle Linux 10 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2025-8477 advisory. 1.23.9-1 - Update to 1.23.9 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note that Nessus has not...

Oracle Linux 10 : libarchive (ELSA-2025-9420)

The remote Oracle Linux 10 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2025-9420 advisory. 3.7.7-3 - Resolves: CVE-2025-25724 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note that Nessus has...

Oracle Linux 10 : .NET / 8.0 (ELSA-2025-7599)

The remote Oracle Linux 10 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2025-7599 advisory. 8.0.117-1.0.1 - Add support for Oracle Linux 8.0.117-1 - Update to .NET SDK 8.0.117 and Runtime 8.0.17 - Resolves: RHEL-94416 8.0.116-2 - Update to .NET SDK...

WordPress LMS Theme <= 9.1 is vulnerable to SQL Injection

Software LMS Type Theme Vulnerable versions = 9.1 Fixed in N/A OWASP Top 10 A3: Injection Classification SQL Injection CVE CVE-2025-52833 Patch priority High CVSS severity High 9.3 Developer Claim ownership PSID 1f6e9200c6d5 Credits Frank Required privilege Unauthenticated Published 30 June, 2025...

Oracle Linux 10 : golang-github-openprinting-ipp-usb (ELSA-2025-9156)

The remote Oracle Linux 10 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2025-9156 advisory. 0.9.27-3 - rebuild to fix CVE-2025-22871 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note that Ness...

Oracle Linux 10 : thunderbird (ELSA-2025-7507)

The remote Oracle Linux 10 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2025-7507 advisory. 128.11.0-1.0.1 - Add Oracle prefs 128.11.0-1 - Update to 128.11.0 128.10.1-1 - Update to 128.10.1 Tenable has extracted the preceding description bloc...

Oracle Linux 10 : gvisor-tap-vsock (ELSA-2025-9151)

The remote Oracle Linux 10 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2025-9151 advisory. - Rebuild on new golang to fix CVE-2025-22871 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note that...

Oracle Linux 10 : .NET / 8.0 (ELSA-2025-8814)

The remote Oracle Linux 10 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2025-8814 advisory. 8.0.117-1.0.1 - Add support for Oracle Linux 8.0.117-1 - Update to .NET SDK 8.0.117 and Runtime 8.0.17 - Resolves: RHEL-94416 8.0.116-2 - Update to .NET SDK...

Oracle Linux 10 : python-setuptools (ELSA-2025-9940)

The remote Oracle Linux 10 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2025-9940 advisory. - Security fix for CVE-2025-47273 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note that Nessus has...

WordPress Devnex Addons For Elementor plugin <= 1.0.9 - Local File Inclusion Vulnerability

Local File Inclusion Vulnerability discovered by Prissy in WordPress Plugin Devnex Addons For Elementor versions = 1.0.9...

WordPress WP Visual Sitemap plugin <= 1.0.2 - Cross Site Scripting (XSS) Vulnerability

Cross Site Scripting XSS Vulnerability discovered by muhammad yudha in WordPress Plugin WP Visual Sitemap versions = 1.0.2...

WordPress The Pack Elementor addon plugin <= 2.1.4 - Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting vulnerability discovered by stealthcopter in WordPress Plugin The Pack Elementor addons versions = 2.1.4...

Oracle Linux 10 : sqlite (ELSA-2025-7517)

The remote Oracle Linux 10 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2025-7517 advisory. - Fix for CVE-2025-3277 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note that Nessus has not tested...

Oracle Linux 10 : expat (ELSA-2025-7512)

The remote Oracle Linux 10 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2025-7512 advisory. - Fix behavior change caused by fix for CVE-2024-8176 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory...

Oracle Linux 10 : python-tornado (ELSA-2025-8135)

The remote Oracle Linux 10 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2025-8135 advisory. 6.4.2-1.el100.1 - httputil: Raise errors instead of logging in multipart/form-data parsing Resolves: RHEL-91992 Tenable has extracted the preceding description...

Oracle Linux 10 : nodejs22 (ELSA-2025-8493)

The remote Oracle Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2025-8493 advisory. - Update c-ares with fix for CVE-2025-31498 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. No...

Oracle Linux 10 : libsoup3 (ELSA-2025-8128)

The remote Oracle Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2025-8128 advisory. - Fix CVE-2025-4035, CVE-2025-4948, CVE-2025-32049, CVE-2025-32907 Tenable has extracted the preceding description block directly from the Oracle Linu...

Oracle Linux 10 : perl (ELSA-2025-7500)

The remote Oracle Linux 10 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2025-7500 advisory. 4:5.40.2-512.1 - 5.40.2 bump see - Resolves: RHEL-87186 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory...

Oracle Linux 10 : firefox (ELSA-2025-8341)

The remote Oracle Linux 10 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2025-8341 advisory. 128.11.0-1.0.1 - Fix firefox-oracle-default-prefs.js for new nss Orabug: 37079789 128.11.0-1 - Update to 128.11.0 128.10.1-1 - Update to 128.10.1...